Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: HHgo4Rji4jPKtULjLI3OfY9JxFeag6OT3vOAa43WHzY=
Subject key identifier: 05:9A:5C:08:57:E9:8E:B5:59:43:AE:3B:11:EE:B3:B2:61:CF:88:79
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 019D39AF3805375083FCC217ED9CC17C63EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 159E
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: vjQaS/AdX/fZShvDpYv5Q0n33F0BekOcJQAjEODvFPM=)
2: tt6jpkDuqE0CT-_FmJx73h6zRuI.roa (hash: YjG/I9+R+aYdPBq5tPHljKWlpfWn8OqsHy3BqigHS4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:38:05:37:50:83:fc:c2:17:ed:9c:c1:7c:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=059a5c0857e98eb55943ae3b11eeb3b261cf8879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:c1:81:b9:be:53:85:f9:7f:a3:12:4c:57:
7c:00:f7:0b:d7:b6:7b:30:04:fd:dc:c7:65:2d:75:
7c:ea:c5:0d:3e:87:97:2d:fb:ea:40:d2:22:e1:e9:
40:ca:ce:dd:c5:88:57:ac:ab:d5:4e:7c:97:e2:a9:
31:ad:f3:bf:54:f3:97:1a:e3:89:c8:5a:ba:16:91:
f6:91:dd:57:c9:75:84:29:45:ee:aa:f6:b4:72:c4:
49:e1:ac:df:97:b6:2f:e9:5e:72:13:78:12:5a:3e:
66:a7:3b:cb:24:b5:7f:99:3e:61:c4:47:bc:69:7e:
ab:cf:1a:ee:af:11:e4:f0:ae:db:91:7b:0b:74:51:
0b:90:ea:36:6b:88:79:b9:b1:97:b9:c8:9e:21:8a:
ff:f2:95:eb:1b:eb:26:50:52:76:3c:a8:2f:9b:ef:
e4:17:f0:50:d3:e7:53:8a:76:22:8f:61:5d:43:cf:
49:19:de:b7:83:30:1c:0e:1d:f2:38:ad:ec:9b:33:
67:78:52:bc:1c:40:a2:71:c9:18:27:e5:7e:e0:ee:
b3:cd:3f:6c:49:4d:23:90:bb:90:b2:df:23:b7:91:
23:3d:b4:95:fe:07:54:8e:51:98:fe:56:12:5b:f3:
b7:03:60:d0:19:85:4d:be:aa:c4:5f:6b:84:9f:26:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:5C:08:57:E9:8E:B5:59:43:AE:3B:11:EE:B3:B2:61:CF:88:79
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c6:0a:87:c6:b7:4b:fa:bf:98:a4:b4:12:bc:47:29:53:e7:
0f:ad:c5:87:f2:ed:7c:e6:1c:29:c1:82:ca:4f:e9:c4:6e:68:
22:34:6d:36:57:64:55:53:b4:75:0b:2e:52:04:1f:c3:40:8f:
13:87:5a:a5:0d:7e:d7:9c:a4:b4:22:b2:76:d2:2c:ef:f1:10:
da:af:98:2c:9e:54:c3:35:31:dd:0e:5b:2a:a9:cb:05:17:38:
cc:8d:3c:22:52:af:35:a9:f5:f7:66:74:5c:83:97:b3:0a:07:
d5:51:2b:f7:d9:e0:5d:6c:24:85:6f:09:e4:12:aa:44:75:4b:
d9:29:64:bc:3f:fa:aa:1a:3a:1f:9a:c7:3b:af:ed:e5:ca:7f:
6b:97:39:8c:39:62:82:ae:38:12:95:33:1d:b0:c6:55:df:9b:
09:8f:96:40:ad:98:4e:5c:71:36:eb:84:d7:f8:eb:36:a4:22:
1c:e3:e7:79:84:24:f6:6d:e0:bd:4e:48:8a:74:ac:4c:d1:a0:
e4:90:a1:c2:47:1d:07:fb:3f:b2:07:34:c2:c3:eb:af:99:66:
d8:8a:05:98:64:b0:57:6b:b2:a2:d8:9e:3a:20:bb:77:59:b8:
9f:f6:7d:77:47:5c:fb:e2:51:0f:8a:6d:00:66:b2:e9:17:de:
3d:98:f0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzgFN1CD/MIX7ZzBfGPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl
NjU0Y2YwHhcNMjYwMzI5MTMwMTE3WhcNMjYwMzMwMTMwMTE3WjAzMTEwLwYDVQQD
EygwNTlhNWMwODU3ZTk4ZWI1NTk0M2FlM2IxMWVlYjNiMjYxY2Y4ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pbBgbm+U4X5f6MSTFd8APcL17Z7
MAT93MdlLXV86sUNPoeXLfvqQNIi4elAys7dxYhXrKvVTnyX4qkxrfO/VPOXGuOJ
yFq6FpH2kd1XyXWEKUXuqva0csRJ4azfl7Yv6V5yE3gSWj5mpzvLJLV/mT5hxEe8
aX6rzxrurxHk8K7bkXsLdFELkOo2a4h5ubGXucieIYr/8pXrG+smUFJ2PKgvm+/k
F/BQ0+dTinYij2FdQ89JGd63gzAcDh3yOK3smzNneFK8HECicckYJ+V+4O6zzT9s
SU0jkLuQst8jt5EjPbSV/gdUjlGY/lYSW/O3A2DQGYVNvqrEX2uEnybWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWaXAhX6Y61WUOuOxHus7Jhz4h5MB8GA1UdIwQY
MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt
MTg3MjNjODQxMTIxLzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx
LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcYKh8a3
S/q/mKS0ErxHKVPnD63Fh/LtfOYcKcGCyk/pxG5oIjRtNldkVVO0dQsuUgQfw0CP
E4dapQ1+15yktCKydtIs7/EQ2q+YLJ5UwzUx3Q5bKqnLBRc4zI08IlKvNan192Z0
XIOXswoH1VEr99ngXWwkhW8J5BKqRHVL2SlkvD/6qho6H5rHO6/t5cp/a5c5jDli
gq44EpUzHbDGVd+bCY+WQK2YTlxxNuuE1/jrNqQiHOPneYQk9m3gvU5IinSsTNGg
5JChwkcdB/s/sgc0wsPrr5lm2IoFmGSwV2uyotieOiC7d1m4n/Z9d0dc++JRD4pt
AGay6RfePZjwUg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:39 2026 by rpki-client